Fw: WSS-TC: Minutes, XVI.NOV.04

[Ron Williams <ron.williams@us.ibm.com>]

OASIS Web Services Security Meeting
- 

Date:  Tuesday, 16 November 2004
Time:  07:00am - 09:00am Pacific Time

Event Description:
Bi-weekly WSS TC call

+1 (734)414-0268
access code: 402049

Our thanks to BEA Systems for sponsoring this call

Agenda:
1. Call to order, roll call 
9:04 AM CST
Quorum Achieved

2. Reading/approving minutes of last meeting (2nd
November 2004) [1] 
Without objection, meetings approved

3. Quick discussion of remaining meetings for 2004
(please read [2])
Without objection, December 28th, 2004 Meeting Cancelled

4. Standard submission status
Hal said that vote had gone off as of 11/15.

5. Errata status and 1.1 draft status
Tony: Incorporating approved changes

6. Other document status (SwA, Kerberos)


7. Issue list review 

84: Encryption Transform. Hal Lockhart asserted that
as a feature it has no general use cases, and that this feature adds complexity
without benefit, and therefore should be eliminated. The beneficial cases
are improbable.
Allows sender to say what was encrypted, and when.

Hal: Existing mechanisms solve problem without ambiguity.
Someone - Not closed on this item
Record: Action on Mike to respond to Hal's eMail before
next call.

282: Password based key derivation (in username token
profile)
Been reviewed for 1.1, marked pending
Action: TC to review

298: Issuer Serial Status - update posted
Action: TC to review

309: 
Action: Editors to incorporate, review pending

310: Hal key identifier with ski: Resolution: you
can make multiple key references.
Ron Monzillo: Implies you can use a thumbprint.
Action: Ron to review

315: Dana Kaufman: PKI Examples, Tony posted updates
in 1.1
Action: TC to review in 1.1 Errata

317: Encrypted Header: 
Action: Hal to review and respond

318:
Action: 1.1 Review

319:
Action: pending review

330:
Action: pending changes from editors

331:
Action:
TC: Pending Review status to be added for documents
"pending review"

334:
Action: Editors integrate Ron's Text into 1.1 document

339:
Action: to be marked closed (PKI Path)


Open Issues:
263: Open Enumeration
Action: Gudge to send email to get response
Thomas proposing it be dropped
Mike proposing it be accepted
Without objection: To be marked closed - TC decided
not worth effort to clean-up in 1.1

331 & 332: Edits on message security
Action: Typos, Pending - to be fixed in errata

338: Proposed
Action: Reviewed for next couple of weeks

340: From Blake - WsA Interop Issues
Action: Marked pending review

341: Lose content transfer encoding in SWA
Action: Review 
Frederick doesn't understand if change as is correct.
TC decided to leave CTI out of profile if possible. Doesn't understand
if this change violates the principle.

342: Pending review on current draft
Action: 4.5.2 Item number 4 - should be associated
with pending issue 342

343:
Action: Leave pending review, request more TC feedback,
close on next call if no issue, specify CID references.

Issue List Discussion closed

8. Interop planning status (SwA2, Kerberos) 
Action: TC to Send email on Kerberos to list

9. Other business 
Kelvin created new calendar entries for 2005.
Attendee Pickups.

10. Adjournment 
Closed 1025 CST

Attendance of Voting Members
 
  Gene Thurston AmberPoint
  Hal Lockhart BEA
  Corinna Witt BEA
  Thomas DeMartini ContentGuard
  Guillermo Lao ContentGuard
  Merlin Hughes Cybertrust
  Sam Wei Documentum
  Tim Moses Entrust
  Dana Kaufman Forum Systems
  Kefeng Chen GeoTrust
  Kojiro Nakayama Hitachi
  Paula Austel IBM
  Derek Fu IBM
  Maryann Hondo IBM
  Kelvin Lawrence IBM
  Mike McIntosh IBM
  Anthony Nadalin IBM
  Ron Williams IBM
  Kate Cherry Lockheed Martin
  Paul Cotton Microsoft
  Chris Kaler Microsoft
  Richard Levinson Netegrity
  Prateek Mishra Netegrity
  Frederick Hirsch Nokia
  Abbie Barbir Nortel
  Lloyd Burch Novell
  Steve Anderson OpenNetwork
  Vamsi Motukuru Oracle
  Ben Hammond RSA Security
  Martijn de Boer SAP
  Blake Dournaee Sarvega
  Coumara Radja Sarvega
  Pete Wenzel SeeBeyond
  Jeff Hodges Sun Microsystems
  Ronald Monzillo Sun Microsystems
  Jan Alexander Systinet
  Symon Chang TIBCO
  John Weiland US Navy
  Maneesh Sahu Westbridge Technology

 
Attendance of Prospective Members and Observers
 
  Martin Gudgin Microsoft
  Carolina Canales-Valenzuela Ericsson
  Nataraj Nagaratnam IBM
  Don Flinn Individual
 
 
Membership Status Changes
 
  Carolina Canales-Valenzuela Ericsson
- Requested membership 11/2/2004
  Irving Reid Hewlett-Packard Company
- LOA 11/3/2004 through 12/18/2004
  Nataraj Nagaratnam IBM - Requested
membership 11/4/2004
  Michael Petkevich BMC - Requested
membership 11/6/2004
  Andrew Nash RSA Security - Lost voting
status after 11/16/2004
  Martin Gudgin Microsoft - Granted
voting status after 11/16/2004 call
  Ramanathan Krishnamurthy IONA - Granted
voting status after 11/16/2004 call

Cheers!
_________________________________________________________________________________________________________
ron williams   sr enterprise architect   ibm software group
   tivoli security  vox +1.512.838.0073  cell +1.512.633.7711

S/MIME Cryptographic Signature